Page 1 of 1

Reload SSL certificate

Posted: Mon Nov 02, 2015 11:14 pm
by rakiru
Does UnrealIRCd 4 allow you to reload the SSL certificate without a restart? I know 3.X can't, as explained in this ticket, but as the codebase for 4 has seen a lot of refactoring, I'm wondering if this has changed.

If it hasn't, I'll create a new ticket for the feature request. Existing connections can continue to use the one they connected to (it doesn't matter to them if the certificate has expired after initial connection), but new connections should use the new cert. Some CAs don't offer certs that last as long as an IRCd generally lives between restarts, and it's been suggested that shorter lifetimes are going to become even more common.

Re: Reload SSL certificate

Posted: Wed Nov 04, 2015 9:25 pm
by Syzop
I see the bug report you quote is closed by Stskeeps in 2005. I added support for this in 2006 (so 3.2.x).
You can reload the SSL certificate with "/REHASH -ssl"

Code: Select all

commit 05f5cfe02b197873c5eb6c09e978a787b4bda4bd
Author: Bram Matthys <[email protected]>
Date:   Sun Aug 20 23:05:55 2006 +0000

    - The server SSL certificate and private key can now be reloaded without requiring a server
      restart, simply use: /REHASH -ssl

Re: Reload SSL certificate

Posted: Fri Nov 06, 2015 6:27 am
by rakiru
Ah, thanks a lot. The only relevant thing I could find on Google was that bug report, so I just assumed it was still the case.